Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FYveWoN8G4Mc9xqmzxZPD08NVq0.roa
File: FYveWoN8G4Mc9xqmzxZPD08NVq0.roa (raw, json)
Hash identifier: iF8YslgSWkV/O08KHGCTJNZCZccUSOC6VQIpX2fzF7g=
Subject key identifier: 15:8B:DE:5A:83:7C:1B:83:1C:F7:1A:A6:CF:16:4F:0F:4F:0D:56:AD
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0197B685ABA707F018B8193B41C9397940C5
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FYveWoN8G4Mc9xqmzxZPD08NVq0.roa
Signing time: Sat 28 Jun 2025 12:31:42 +0000
ROA not before: Sat 28 Jun 2025 12:31:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 94.183.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jun 2025 08:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:85:ab:a7:07:f0:18:b8:19:3b:41:c9:39:79:40:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 28 12:31:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=158bde5a837c1b831cf71aa6cf164f0f4f0d56ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:d5:6e:5c:2a:61:80:b2:fb:99:b3:5b:37:
6c:c1:1e:ab:4d:ed:6f:2d:0f:34:5e:9b:6d:de:d3:
7f:83:78:82:53:b3:43:58:d2:93:c7:ac:a7:51:10:
89:11:55:64:e0:0d:a2:95:55:63:03:84:5d:36:68:
7a:ef:f1:fa:f1:9e:05:ca:a6:38:ef:22:98:c5:2b:
95:67:df:4c:04:7e:7d:09:19:d4:5b:18:f9:6c:31:
10:fa:47:0a:ca:cb:eb:1c:06:a4:c7:42:95:d1:31:
5d:04:7d:3c:11:15:62:03:e0:2a:cf:99:0b:27:86:
bb:b6:d4:1d:00:ea:fb:a0:49:04:c7:98:93:36:43:
02:1d:88:98:bf:83:58:11:16:91:c5:86:de:b8:91:
3c:36:9d:fe:a1:b6:28:20:b3:ba:33:04:ae:80:7f:
4a:10:ed:c9:dc:ce:ac:38:3d:e9:78:c3:f3:c9:8c:
d7:b0:5c:bc:53:a7:ab:f8:c3:32:93:48:0f:aa:c8:
58:1e:4f:12:0e:26:18:c7:a1:60:00:68:17:bd:98:
78:ed:e6:54:7a:ea:4a:e5:ba:dc:fc:e0:5c:49:f8:
d2:7c:0c:08:5d:28:cc:f3:7d:36:f5:a6:ab:7d:c9:
58:fe:0e:45:55:1a:ae:79:56:77:a5:0b:d1:4c:46:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8B:DE:5A:83:7C:1B:83:1C:F7:1A:A6:CF:16:4F:0F:4F:0D:56:AD
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/FYveWoN8G4Mc9xqmzxZPD08NVq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b6:fc:ee:32:a0:28:92:af:67:c7:4e:98:71:eb:79:9c:a2:
63:37:a9:fc:f7:c9:67:37:55:00:40:98:ca:a6:94:ec:82:67:
f2:54:18:8a:7e:74:26:83:0d:1a:ec:a2:2b:47:3d:a2:4c:6b:
92:2c:d3:a1:44:31:2a:b2:36:60:fa:40:50:72:74:42:2c:c8:
95:7f:3a:d3:77:c6:bb:20:1e:a2:27:e5:97:de:9a:bb:e2:91:
4e:51:de:95:bd:43:99:c0:b0:91:ba:91:ed:c3:09:7b:b2:a5:
04:08:ac:db:f2:6e:57:5f:17:57:e4:a4:c2:c3:c7:60:9f:c6:
5d:38:6e:a9:69:36:aa:af:c3:9b:02:2e:22:3b:55:0b:ee:1b:
e4:b5:e3:34:cb:75:d1:25:01:8c:df:2f:46:89:93:24:5b:45:
4b:34:81:a5:6d:6e:bc:d7:9a:78:61:52:bc:08:3c:fa:44:54:
7a:73:db:55:9a:20:d4:cc:7e:80:9b:df:12:a5:39:2f:b3:7c:
ff:07:78:92:91:d4:c7:22:f7:c8:6d:9a:c0:c7:4f:ac:b2:e1:
92:fc:1f:ef:b1:61:ce:83:88:92:11:de:4a:cb:bc:ea:0f:83:
73:ff:3d:b2:67:bf:d7:30:17:35:61:9a:f6:c4:5e:56:8f:ba:
e8:78:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:58:41 2025 by rpki-client